A release manifest should name every published byte
One aggregate digest is useful, but a sorted per-file manifest tells you exactly what changed or went missing.
Checksums
One aggregate digest is useful, but a sorted per-file manifest tells you exactly what changed or went missing.